[PATCH nf 0/2] fixes for nftables offload

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

These patchset fixes nftables offload for the two cases:

- matching on exact IP address
- matching on prefix IP address

Tested with mlx5.

Pablo Neira Ayuso (2):
  netfilter: nftables_offload: set address type in control dissector
  netfilter: nftables_offload: build mask based from the matching bytes

 include/net/netfilter/nf_tables_offload.h |  7 +++
 net/netfilter/nf_tables_offload.c         | 18 ++++++
 net/netfilter/nft_cmp.c                   |  8 +--
 net/netfilter/nft_meta.c                  | 16 +++---
 net/netfilter/nft_payload.c               | 68 +++++++++++++++++------
 5 files changed, 88 insertions(+), 29 deletions(-)

-- 
2.20.1




[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux